CVE-2026-107734

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

cve-2019-15107

CVE-2019-15107 - RCE no autenticado en Webmin Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2019-15107 que afecta a las versiones 1.890 a 1.920 de Webmin. El script explota una puerta trasera en las versiones 1.890 a 1.920 que permite a usuarios no autenticad...

CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...

CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0

CVE-2026-32238 - Remote Code Execution in OpenEMR Weakness CWE-78 : Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize...

CVE-2026-107802 SumatraPDF — Windows command-line argument injection in AI selection-translate

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows command lines using incomplete quote-only escaping. The affected BuildGrokTranslateCmdLineTemp, BuildClaudeTranslateCmdLineTemp, and...

CVE-2026-107802 SumatraPDF — Windows command-line argument injection in AI selection-translate

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows command lines using incomplete quote-only escaping. The affected BuildGrokTranslateCmdLineTemp, BuildClaudeTranslateCmdLineTemp, and...

CVE-2026-107802

SumatraPDF (version 3.6.1 and earlier) is vulnerable to Windows command-line argument injection within its AI selection-translate feature. The issue resides in src/SelectionTranslate.cpp, where the functions BuildGrokTranslateCmdLineTemp(), BuildClaudeTranslateCmdLineTemp(), and BuildCodexTransla...

-CTT-PAN-OS-EXPLOIT-CVE-2024-340

-CTT-PAN-OS-EXPLOIT-CVE-2024-340 CTT-PAN-OS-Exploit – CVE-2024-3400 CVSS 10.0 con mejora de la Teoría del Tiempo Convergente. Utiliza α = 0.0302011 de dispersión temporal, cascada de resonancia de fase de 33 capas y filtrado de cuña temporal de 11 ns para explotar la inyección de comandos de Palo...

CVE-2026-107734

SumatraPDF (version 3.5.2 and earlier) is vulnerable to SyncTeX Argument Injection during an inverse search. The root cause is the substitution of an attacker-controlled SyncTeX source filename for the %f placeholder in an external editor command line without employing safe Windows argument quoti...

CVE-2026-107734 SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

CVE-2026-107734 SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

CVE-2026-107732 SumatraPDF: Markup/command-link injection into UI notification text

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

CVE-2026-107732

The multi-format reader SumatraPDF for Windows (version 3.6.1 and earlier ) is vulnerable to markup/command-link injection . The issue occurs because untrusted document paths and PDF link targets are interpolated into notification text, which the ParseTip() function interprets as trusted tip mark...

CVE-2026-84057

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

jboss-autopwn

⚠️ NOTA: Esta herramienta ya no recibe mantenimiento activo. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUCCIÓN Este script de JBoss despliega un shell JSP en el servidor JBoss AS de destino. Una vez desplegado, el script utiliza su capacidad de carga y ejecució...

CVE-2025-34037

CVE-2025-34037 Versión en Python del exploit RCE de Linksys tmUnblock.cgi Solo para uso educativo. Ejecútalo contra tus propios dispositivos. Vulnerabilidad El endpoint tmUnblock.cgi en varios modelos de routers Linksys acepta solicitudes POST sin validar el encabezado Authorization. El parámetro...

EUVD-2026-42899

PraisonAI: Shell command allowlist bypass via find -exec built-in action...

PraisonAI: Shell command allowlist bypass via find -exec built-in action

Summary The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj utility-tools shell chaining and GHSA-vjv9-7m7j-h833 SandboxExecutor chaining can be bypassed via find's built-in -exec action. The fix blocks shell metacharacters ;|& + The ...

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

Summary The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization. An attacker can achieve arbitrary file write to any location on the filesystem including /root/.ssh/authorizedkeys, /etc/crontab and arbitrary command...